Australian cloud for business software — built and run in Sydney since 2003

NetLeverage
NetLeverage

Designing a pilot that actually predicts production migration risk

Technical article
Hosting

About this article: AI-assisted writing, reviewed against the cited sources. This is source research, not lab validation. Check the stated versions and your own requirements before making changes.

A migration pilot is useful when its pass/fail result correlates with production cutover risk. A pilot that uses toy data, silent integrations, and power users who tolerate workarounds is a dress rehearsal on a different play.

Pilot design is sampling and measurement discipline. It is not a smaller copy of cutover mechanics (those belong in test migration and runbook rehearsal).

NIST SP 800-84 distinguishes exercise types and insists that objectives and success criteria are defined before the event so effectiveness can be assessed (NIST SP 800-84, sections on exercise planning and evaluation). Adapt that to migration: the pilot is an exercise whose pass means “production cutover risks we cared about are controlled”, not “the demo looked fine”.

Why it matters

False green pilots create false confidence at the migration board. Production then discovers: printing does not work for accounts, a nightly API call still aims at the old IP, or FSLogix profiles balloon on real user data.

A well-designed pilot surfaces those faults when rollback is cheap.

How it works

Define what the pilot must predict

List production risks the pilot should exercise, for example:

  • Authentication path used by majority of staff (not only IT).
  • Largest realistic database or file share attached.
  • Representative integrations (payroll export, CRM sync); at least one per class.
  • Scheduled jobs that touch business dates.
  • Client software version mix (Terminal Server/RemoteApp scenarios).

If the pilot explicitly excludes an item, production must accept that residual risk or add another test.

Choose pilot users deliberately

Avoid only enthusiasts. Include:

  • A “sceptical competent” user who will report friction honestly.
  • One role with heavy document or scan workflow.
  • One remote user on the same network path production will use.

Avoid only head office if branches have different DNS, printing, or latency.

Choose sample size from the risks, workload diversity and evidence needed. A small group can provide detailed functional evidence; it does not prove production capacity. Record untested user populations, concurrency and business cycles, then plan representative load validation before making performance claims.

Match the environment

Pilot environment should mirror production where risk lives:

Dimension Pilot should match May differ if documented
Identity and access path Representative policies and roles Use approved test identities; a live path needs explicit scope and containment
Network path to hosted app Representative latency, routing and client types Reach isolated pilot services; do not connect a cloned writer to production
Data size and distribution Representative for the tested workflows Use synthetic or appropriately masked data; document differences in volume and distribution
Integration behaviour Representative protocol, validation and failure cases Use sandbox endpoints or controlled stubs; test credentials alone do not prevent real effects
Server sizing and concurrency Match the capacity claim being tested Smaller functional pilots leave production concurrency and capacity unverified

Azure Migrate test migration recommends an isolated virtual network to avoid production impact. Fence outbound production writes, payments, emails and scheduled batches, including calls made by copied services. A specifically authorised live pilot needs a defined data partition, writer ownership and recovery boundary; do not infer authorisation from access to an endpoint.

Success criteria (written before pilot start)

Examples:

  • Complete workflow W from role R in under X minutes with zero data errors.
  • Integration I delivers a synthetic file to the isolated downstream test endpoint with the correct naming and timestamp, without triggering a real external action.
  • Help-desk receives no more than Y pilot-related tickets per day after day 3.

Criteria must be pass/fail with evidence (export, log, ticket count).

Bias you must document

  • Novelty effect; users try harder during pilot week.
  • Hawthorne; extra support staff hovering.
  • Selection bias; volunteers skew skilled.

Mitigate by running a second short wave with random assignment or mandatory participation for one task per role.

When to stop calling it a pilot

If production cutover is days away and the pilot has not tested integrations, rename the activity “connectivity smoke test” and do not use its pass in go/no-go.

What to choose and why

Choose depth over headcount for line-of-business apps.

Choose production-network path even if data is masked; latency surprises are pilot-worthy.

Choose explicit non-goals so the board cannot misread a narrow pass.

Risks and limits

Pilot on old application version while production will cut over on a new patch; invalid.

Pilot success = vendor demo; vendor-led demos are sales, not pilot evidence.

Does not replace dependency mapping or cutover runbook gates.

How it works; programme context.

Sources

Developed with AI assistance. Source research only; no migration, recovery or infrastructure procedure was executed or lab validated.

Source research accessed 14 November 2026. These documents support the stated principles and tool-specific conditions; the planning templates are editorial recommendations.

Related future topics

  • Wave-one application selection.
  • Go/no-go criteria before cutover.
  • Acceptance before decommission.

Learning notes

  • Pilots fail when they sample the wrong users, data or integrations.
  • Write pass/fail criteria before the pilot starts.
  • Represent the intended network conditions while keeping pilot writes and external effects isolated.
  • Document bias and residual risk when something was out of scope.
  • A smoke test is not a pilot; name exercises honestly.